Описание
A vulnerability has been identified in Industrial Edge Management (All versions < V1.5.1). The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and the intended server.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.5.1 (исключая)
cpe:2.3:a:siemens:industrial_edge_management:*:*:*:*:*:*:*:*
EPSS
Процентиль: 35%
0.0014
Низкий
7.4 High
CVSS3
Дефекты
CWE-295
CWE-295
Связанные уязвимости
CVSS3: 7.4
github
больше 3 лет назад
A vulnerability has been identified in Industrial Edge Management (All versions < V1.5.1). The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and the intended server.
EPSS
Процентиль: 35%
0.0014
Низкий
7.4 High
CVSS3
Дефекты
CWE-295
CWE-295